Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json)
Hash identifier: XZkriqPQiKrVgTz3PDTkRHcxSM08NxOVuqqHN1Il2Zs=
Subject key identifier: 98:52:86:70:E7:C7:3D:FE:39:72:AE:8B:C9:D0:09:78:FB:9F:49:58
Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Certificate serial: 0199FBEB609B093687EF7F488903386F3B65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:10 +0000
Manifest this update: Sun 19 Oct 2025 10:02:10 +0000
Manifest next update: Mon 20 Oct 2025 10:02:10 +0000
Files and hashes: 1: GDkJM0lrFwKj0pA-1b6WqbIKy5U.roa (hash: AJLBt3MjV7p+Y7RRJ8TCQIrAHHyRPR0203cHSf77IXw=)
2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: TKxZop7tPrtawreydNhi4WjYaDzYJdTTkj/9KaSxlUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:60:9b:09:36:87:ef:7f:48:89:03:38:6f:3b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3
Validity
Not Before: Oct 19 10:02:10 2025 GMT
Not After : Oct 20 10:02:10 2025 GMT
Subject: CN=98528670e7c73dfe3972ae8bc9d00978fb9f4958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:99:0d:ae:76:7b:5b:f8:4d:5a:f3:31:75:e7:
9b:66:d9:4e:20:23:18:37:5d:14:7d:bb:36:c2:eb:
e8:91:5d:5b:9e:33:e2:a6:25:70:5a:7d:3f:12:e0:
18:df:dd:2d:91:d2:24:a3:12:b5:b1:63:7d:45:97:
bd:c9:4a:a6:90:2b:3a:6b:73:cc:01:73:b2:f3:bb:
7e:89:ad:ea:f2:38:c9:cc:32:68:e4:3d:2f:a8:9e:
db:fd:65:b9:f3:4d:e1:95:e7:a4:1d:43:17:fa:bb:
fa:df:50:49:fe:5d:9e:45:0c:40:4e:98:e1:52:ae:
cd:a4:a7:1e:62:87:cb:ee:09:74:92:c2:3c:12:0e:
db:9a:e1:1e:18:33:fa:02:d9:ab:91:91:3c:24:9f:
73:6f:80:1d:0f:aa:ef:cc:bc:b8:ca:b6:39:20:09:
24:a6:cb:7b:f6:b2:f7:f8:2f:77:04:f6:e0:62:5e:
f8:93:5b:13:89:ce:4b:a0:15:70:83:e9:95:e7:f9:
88:2c:29:49:d4:0a:9b:99:e5:08:b7:d5:0c:31:ef:
1c:a3:e9:eb:30:48:f6:17:c2:f3:67:89:bc:4d:d5:
e5:1d:35:6d:0b:70:95:d1:f8:68:1c:a7:b3:56:3f:
a8:c7:ca:eb:32:ec:3b:0b:39:ec:31:eb:a2:7a:df:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:52:86:70:E7:C7:3D:FE:39:72:AE:8B:C9:D0:09:78:FB:9F:49:58
X509v3 Authority Key Identifier:
keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c5:ec:28:8b:69:f2:13:4a:8b:2b:6b:b2:da:ee:9e:42:b5:
fa:d5:6e:65:57:f4:7c:b8:9d:fe:9a:0f:f8:70:87:01:40:f2:
5e:44:36:65:0b:65:76:ef:be:05:b8:c5:88:20:d5:c1:e1:84:
ff:d6:bf:63:a6:90:1d:65:55:6b:da:37:60:76:20:b3:fc:63:
9b:4e:ae:3a:8f:3f:66:aa:4c:61:af:ec:1a:57:01:29:e3:0f:
3f:68:a5:55:b0:01:33:22:8b:0f:22:3a:9c:c7:89:e3:87:cb:
86:e4:c0:31:51:54:62:22:bd:e9:c6:8f:2b:56:9e:57:bc:6a:
0b:c1:f5:79:15:db:21:d0:f5:2c:5f:ba:4d:6c:f7:aa:34:17:
9a:85:79:14:29:c9:5c:09:e1:67:ed:ef:e3:df:e2:2d:50:c6:
a7:66:0b:d7:79:9e:c9:98:92:2b:15:f8:c9:e9:39:52:7d:c3:
d5:6f:e7:dd:39:ef:41:07:9c:3a:63:d0:55:68:cc:73:70:2e:
31:42:c5:bb:af:6d:04:81:b1:52:27:ef:7c:e4:ca:90:bb:2c:
8e:cb:c7:72:1e:26:4c:c1:1a:13:44:1c:b5:f1:b1:64:97:37:
fb:ef:58:1b:57:01:da:7d:7a:96:c5:76:55:f7:74:51:be:f6:
2f:db:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:58 2025 by rpki-client